NetSight
IP …
high7.5

CVE-2019-19835

SSRF in AjaxRestrictedCmdStat in zap in Ruckus Wireless Unleashed through 200.7.10.102.64 allows a remote denial of service via the server attribute to the too…

Impact

SSRF in AjaxRestrictedCmdStat in zap in Ruckus Wireless Unleashed through 200.7.10.102.64 allows a remote denial of service via the server attribute to the tools/_rcmdstat.jsp URI.

Affected products

VendorProductAffected versions
RuckuswirelessUnleashed
before 200.7.10.202.94
RuckuswirelessZonedirector 1200 Firmware
before 9.10.2.0.84
from 9.12.0 before 9.12.3.0.136
from 9.13.0 before 10.0.1.0.90
from 10.1.0 before 10.1.2.0.275
from 10.2.0 before 10.2.1.0.147
from 10.3.0 before 10.3.1.0.21

Weakness classification

CWE-918

References